# Reference: server.sandbox

URL: https://scalws.com/docs/reference/server-sandbox/
Source: `docs/reference/schema` in the ScalWS repository

<h3 id="server.sandbox.mode"><code>server.sandbox.mode</code></h3>

| | |
|---|---|
| Syntax | `mode: off \| audit \| on` |
| Default | `required` |
| Context | `server.sandbox` |
| Reload | applies on reload |

`off` (default), `audit` or `on`. Applied only to a configuration that starts no processes (no managed runtimes, no tenant users) and on kernels with Landlock.


<h3 id="server.sandbox.read_paths"><code>server.sandbox.read_paths</code></h3>

| | |
|---|---|
| Syntax | `read_paths: [<string>, ...]` |
| Default | `none` |
| Context | `server.sandbox` |
| Reload | applies on reload |

Extra directories scalwsd may read under scalws-controller (where reads are limited to what the configuration names); missing ones are skipped.


<h3 id="server.sandbox.write_paths"><code>server.sandbox.write_paths</code></h3>

| | |
|---|---|
| Syntax | `write_paths: [<string>, ...]` |
| Default | `none` |
| Context | `server.sandbox` |
| Reload | applies on reload |

Extra directories scalwsd may write (created at start when missing).